Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/95d3cb0f-cdd5-3429-bc05-9374d89b31cb.roa
File:                     95d3cb0f-cdd5-3429-bc05-9374d89b31cb.roa (raw, json)
Hash identifier:          4Hpr7YPBdTv/cIwiOjUXytJl/pKiYTxZAtP2PbeAJxk=
Subject key identifier:   D7:EB:67:29:C2:5E:51:4A:B3:57:9A:66:7A:9F:38:B2:84:C2:60:53
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584F7A4D8EA0C33C3E351674EA60
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/95d3cb0f-cdd5-3429-bc05-9374d89b31cb.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     2386
IP address blocks:        69.51.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:8e:a0:c3:3c:3e:35:16:74:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=bcec9141-74b7-4fc7-a551-21fc4f54bbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:b3:b9:1f:3f:86:27:68:7d:b2:a3:01:17:
                    11:c1:74:96:a7:be:74:f1:f1:22:59:98:8b:98:62:
                    f7:d4:b5:60:a6:4d:f3:f2:6f:27:9c:f7:60:b7:67:
                    8c:60:38:9f:53:f7:10:f9:2d:0b:b1:66:24:a9:10:
                    cf:20:20:ea:39:2e:99:ab:03:36:2c:11:ac:dc:73:
                    df:b0:1e:f0:61:39:85:57:52:b5:17:c9:fd:76:f7:
                    fc:5e:2d:dc:2e:80:fc:ad:13:c0:6e:ed:7c:4a:08:
                    04:ff:1e:d3:6c:e5:ec:f8:71:11:c6:e5:98:79:4a:
                    2a:40:11:d8:74:fa:84:d0:ba:98:ce:62:13:e7:81:
                    58:d0:43:3b:51:7f:48:59:46:f3:61:a8:c9:4b:5c:
                    55:42:df:17:dd:c2:ae:bd:6f:d9:4e:07:9c:d3:e8:
                    55:7d:3e:72:de:a2:33:d5:af:32:15:54:82:bb:bb:
                    d9:ec:be:eb:83:35:29:40:e8:3c:0b:31:40:4c:42:
                    ff:4d:5c:90:c7:23:8c:ef:c7:55:ca:fd:47:a1:88:
                    97:18:fb:81:9d:78:ed:07:ca:e1:8e:c5:34:02:f9:
                    69:84:83:53:84:c9:85:a8:8d:23:0f:50:97:d6:3d:
                    93:7e:ff:d2:3a:36:ff:84:8c:0d:29:9a:ce:45:9e:
                    7a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EB:67:29:C2:5E:51:4A:B3:57:9A:66:7A:9F:38:B2:84:C2:60:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/95d3cb0f-cdd5-3429-bc05-9374d89b31cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:59:80:c1:4d:f9:d3:72:c3:54:2b:e7:ba:86:be:db:b3:
         89:0b:bc:9b:fc:20:24:9d:26:99:ed:3f:af:08:b3:ce:4b:77:
         98:dd:ae:68:c1:f8:7e:fc:13:fa:d8:1c:48:c8:d6:df:95:53:
         24:8f:51:50:44:3a:d8:79:5d:46:cd:69:85:ec:47:e8:9b:66:
         26:3b:1e:5b:3e:ea:61:76:6c:93:42:a6:85:fa:f7:91:d5:c8:
         52:73:5b:a1:c6:fa:c8:a8:7a:b6:ad:8c:86:cb:c6:ce:3d:6c:
         16:33:c0:7e:04:3a:4e:89:9c:0e:8c:66:53:e6:b3:1d:62:35:
         8f:2e:94:67:0f:5d:61:ce:c2:d2:28:50:de:29:10:6a:39:c9:
         f3:be:43:46:5a:64:7b:e3:bd:80:55:61:64:16:12:70:89:19:
         3f:e1:ff:c6:66:2f:7e:5c:12:fa:21:7f:ee:e4:4f:d1:44:d9:
         b2:41:31:22:37:da:97:07:25:9a:7c:23:08:dd:07:69:8e:35:
         fe:60:db:7f:7d:b9:2b:d9:64:0d:9b:b3:9f:ed:b8:b5:73:19:
         9c:83:f0:6f:ac:c2:42:a9:6b:14:25:75:a4:63:67:89:e3:89:
         d7:a2:f3:93:46:7c:c2:62:eb:4f:5a:25:ce:7e:10:f0:e0:0b:
         2b:54:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:50:08 2026 by rpki-client